bootstrap and password hasher